Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa
File:                     d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa (raw, json)
Hash identifier:          xlaVeZ1ry5ljGL9inAWLNd8wPH8bTTM85eaUPH/Azkk=
Subject key identifier:   31:DC:23:97:7C:C6:09:B4:35:90:EC:89:A4:ED:46:25:AA:D3:6A:63
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       52B6E5A7664ADE34D48635651F1F40C737CD39C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa
Signing time:             Thu 23 Jul 2026 15:30:11 +0000
ROA not before:           Thu 23 Jul 2026 15:30:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d073:c040::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:e5:a7:66:4a:de:34:d4:86:35:65:1f:1f:40:c7:37:cd:39:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jul 23 15:30:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=88d82de86adec42d3134443dd12273b7f145b5436145e8220e6fab9a38ba2ec3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6e:ee:ed:f6:95:5f:fd:0b:b6:48:5e:52:c1:
                    f1:a1:68:df:cf:f2:af:45:41:c8:83:08:16:15:82:
                    ea:63:60:1c:42:12:7b:6a:1a:39:a5:36:f0:47:97:
                    1f:99:3c:06:28:4f:cc:2e:be:08:4d:7a:41:c1:3c:
                    77:f7:58:2a:73:d0:ec:e1:31:e3:1b:94:f3:fa:7b:
                    11:23:9a:cf:33:40:be:7d:d1:a4:91:47:ce:a5:2a:
                    d9:37:fb:11:0f:38:68:07:00:2e:50:a7:fa:fd:a8:
                    b3:2d:60:b8:6d:35:fd:da:96:d2:65:f5:01:41:67:
                    3b:18:e3:6d:e5:42:10:87:67:1e:ac:72:04:65:4b:
                    e0:ec:05:ee:ab:c6:33:ca:c7:d6:09:79:02:f7:8c:
                    b4:f4:af:f6:e4:08:f4:d0:59:ee:95:e0:7a:9f:1c:
                    82:f4:1c:40:68:eb:7c:31:a4:e4:e1:a2:40:66:f6:
                    82:1a:7f:23:71:5f:77:29:e1:cb:ac:10:2f:de:1d:
                    25:9e:c0:8d:e2:4e:38:a1:16:45:c6:83:7b:e7:52:
                    0c:14:13:52:2d:45:5c:be:37:9d:37:37:c3:4b:3e:
                    18:97:ec:0e:52:b7:49:1c:64:5f:bf:e2:86:fd:06:
                    ee:00:07:d4:47:e1:ad:4f:43:27:6f:fb:5b:1f:da:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DC:23:97:7C:C6:09:B4:35:90:EC:89:A4:ED:46:25:AA:D3:6A:63
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d1c01c92-4a2e-40c8-9b72-e653ac9896ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d073:c040::/46

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:b6:16:f7:05:ca:dc:81:38:72:b4:6a:95:d4:c0:13:66:
         51:6b:e1:37:59:f4:71:52:2f:45:08:c7:2b:d8:7d:9e:73:9d:
         0d:f5:c5:42:61:cf:e1:ae:a5:8f:06:0a:31:78:26:d1:3d:73:
         14:42:a7:45:3d:d6:46:c1:a1:af:38:7a:9e:39:d4:d2:70:03:
         51:cb:2b:39:95:63:97:b4:9e:0d:e3:cd:15:d0:18:3f:7c:2a:
         4a:78:52:f3:53:6d:27:09:02:53:76:87:8a:90:9f:aa:f3:45:
         0e:e1:66:c1:36:a2:ff:ed:2b:67:54:1d:6e:b8:d1:6f:38:5b:
         b0:4e:d5:94:9e:48:b2:11:a2:ea:b9:ad:75:09:59:1e:3e:8e:
         2f:18:f2:4b:f0:95:62:83:d8:8d:81:9f:fc:ea:ad:3d:3b:19:
         f6:06:56:3e:8c:6c:d3:4b:9a:c2:07:b3:25:3e:64:54:39:63:
         c7:ee:cb:ae:84:8f:d6:09:9b:22:08:e7:7b:fe:79:d9:af:c8:
         9c:4c:cf:4d:ad:40:e2:ec:5c:8c:30:df:1c:7c:46:76:41:9d:
         97:9c:d0:fe:e1:19:8f:fd:bc:c5:12:35:9f:6c:9d:f3:7e:8d:
         81:70:80:a7:44:e8:3a:81:01:59:73:03:cb:6e:78:80:bf:a8:
         13:99:a1:81
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUUrblp2ZK3jTUhjVlHx9AxzfNOcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNjA3MjMxNTMwMTFaFw0yNjEwMjEyMzU5NTlaMHoxSTBHBgNV
BAUTQDg4ZDgyZGU4NmFkZWM0MmQzMTM0NDQzZGQxMjI3M2I3ZjE0NWI1NDM2MTQ1
ZTgyMjBlNmZhYjlhMzhiYTJlYzMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPVu7u32lV/9C7ZIXlLB8aFo38/yr0VByIMIFhWC6mNgHEISe2oaOaU28EeX
H5k8BihPzC6+CE16QcE8d/dYKnPQ7OEx4xuU8/p7ESOazzNAvn3RpJFHzqUq2Tf7
EQ84aAcALlCn+v2osy1guG01/dqW0mX1AUFnOxjjbeVCEIdnHqxyBGVL4OwF7qvG
M8rH1gl5AveMtPSv9uQI9NBZ7pXgep8cgvQcQGjrfDGk5OGiQGb2ghp/I3Ffdynh
y6wQL94dJZ7AjeJOOKEWRcaDe+dSDBQTUi1FXL43nTc3w0s+GJfsDlK3SRxkX7/i
hv0G7gAH1EfhrU9DJ2/7Wx/aHbUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQx3COX
fMYJtDWQ7Imk7UYlqtNqYzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDFjMDFjOTItNGEyZS00MGM4LTliNzItZTY1M2FjOTg5NmNhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HPA
QDANBgkqhkiG9w0BAQsFAAOCAQEAeX22FvcFytyBOHK0apXUwBNmUWvhN1n0cVIv
RQjHK9h9nnOdDfXFQmHP4a6ljwYKMXgm0T1zFEKnRT3WRsGhrzh6njnU0nADUcsr
OZVjl7SeDePNFdAYP3wqSnhS81NtJwkCU3aHipCfqvNFDuFmwTai/+0rZ1QdbrjR
bzhbsE7VlJ5IshGi6rmtdQlZHj6OLxjyS/CVYoPYjYGf/OqtPTsZ9gZWPoxs00ua
wgezJT5kVDljx+7LroSP1gmbIgjne/552a/InEzPTa1A4uxcjDDfHHxGdkGdl5zQ
/uEZj/28xRI1n2yd836NgXCAp0ToOoEBWXMDy254gL+oE5mhgQ==
-----END CERTIFICATE-----